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AMENDMENTS 
In the claims 

1. (Currently Amended) ) An apparatus comprisingi 

A a communications device comprising: 
a subsystem: and 

a logging module, wh e r e in coupled to said subsystem^ and configured to 
detect a change to a configuration of said subsystem of said 

communications deyice. and 
th e logging modulo is configured to communicate information regarding a 

said change to « said configuration of « said subsystem of (he said 

communications device. 

2. Cancelled. 

3. Cancelled. 

4. (Currently Amended) The communications device of claim [[PI] i, wherein 
the logging module is further configured to broadcast a data packet using a logging 

module network address and a logging module communications protocol. 

5. (Original) The communications device of claim 4, wherein 

the logging module is further configured to restrict a change to a configuration of the 
logging module by the subsystem. 

6. (Original) The communications device of claim 4, wherein 

the logging module is further configured to communicate the change to the configuration 
of the subsystem by broadcasting the data packet, wherein the data packet 
indicates the change to the configuration of the subsystem. 
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7. (Original) The communications device of claim 6, wherein 

the logging module is configured to broadcast the change to the configuration of the 
subsystem to at least one security monitor coupled to the subsystem via a 
network. 

8. (Original) The communications device of claim 7, wherein 

the security monitor is configured to set the communications device to an 

'Hintrustworthy" status in response to receiving the change to the configuration of 
the subsystem. 

9. (Original) The communications device of claim 8, wherein 

the security monitor is configured to disconnect the communications device firom the 
network in response to the communications device being set to the 
"untrustworthy" status, 

10. (Original) The communications device of claim 4, wherein 

the logging module is fiirther configured to restrict the subsystem from broadcasting 
using the logging module network address and the logging module 
communications protocol. 

1 1 . (Original) The communications device of claim 4, wherein 
the logging module is configured to broadcast a series of data packets, 
each of the data packets comprises an index number, and 

each of the index numbers is taken fi-om a sequence of numbers. 

1 2. (Original) The communications device of claim 4, wherein 

the logging module is configured to communicate the change to the configuration of the 
subsystem when a condition is satisfied. 

13. (Original) The communications device of claim 12, wherein 

the logging module is configured to communicate the change to the configuration of the 
subsystem when an amount of the change is above a certain threshold. 
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14. (Original) The communications device of claim 12, wherein 

the logging module is configured to communicate the change to the configuration of the 
subsystem when a criticality of the change is above a certain threshold. 

15. (Original) The communications device of claim 12, wherein 

the logging module is configured to communicate the change to the configuration of the 
subsystem periodically. 

16. (Currently Amended) The communications device of claim [13]] I, wherein 
the subsystem is a communications interface. 

17. (Original) The communications device of claim 16» wherein 

the logging module is fiirther configured to restrict a change to a configuration of the 
logging module by the communications interface. 

1 8. (Original) The communications device of claim 1 6, wherein 

the logging module is further configured to broadcast using the communications interface 
using a logging module network address and a logging module communications 
protocol. 

19. (Original) The communications device of claim 1 8, wherein 

the logging module is fiirther configured to restrict a change to a configuration of the 
logging module by the communications interface. 

20. (Original) The communications device of claim 1 8, wherein 

the logging module is configured to communicate the change to the configuration of the 
communications interface by broadcasting the change to the configuration of the 
communications interface. 
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2 1 . (Original) The communications device of claim 20, wherein 

the logging module is configured to broadcast the change to the configuration of the 
communications interface to at least one security monitor coupled to the 
communications interface via a network. 

22. (Original) The communications device of claim 21, wherein 

the security monitor is configured to set the communications device to an 

"untrustworthy" status in response to receiving the change to the configuration of 
the communications interface. 

23. (Original) The communications device of claim 22, wherein 

the security monitor is configured to disconnect the communications device from the 
network in response to the communications device being set to the 
"untrustworthy" status. 

24. (Original) The communications device of claim 18, wherein 

the logging module is further configured to restrict the commimications interface from 
broadcasting using the logging module network address and the logging module 
communications protocol. 

25. (Original) The communications device of claim 24, wherein 

the logging module is configured to restrict the communications interface from 

broadcasting a change to the configuration of the communications interface using 
the logging module network address and the logging module communications 
protocol. 

26. (Original) The communications device of claim 1 8, wherein 

the logging module is configured to broadcast using a series of data packets, 

each of the data packets comprises an index number, and 

each of the index numbers is taken from a sequence of numbers. 
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27. (Original) The communications device of claim 18, wherein 

the logging module is configured to communicate the change to the configuration of the 
communications interface when a condition is satisfied. 

28. (Original) The communications device of claim 27, wherein 

the logging module is configured to communicate the change to the configuration of the 
communications interface when an amount of the change is above a certain 
threshold. 

29. (Original) The communications device of claim 27, wherein 

the logging module is configured to communicate the change to the configuration of the 
communications interface when a criticality of the change is above a certain 
threshold. 

30. (Original) The communications device of claim 27, wherein 

the logging module is configured to communicate the change to the configuration of the 
communications interface periodically. 

3 1 . (Currently Amended) The communications device of claim [[311 1, wherein 
the logging module is configured to communicate the change to the configuration of the 

subsystem by broadcasting the change to the configuration of the subsystem. 

32. (Original) The communications device of claim 31, wherein 

the logging module is configured to broadcast the change to the configuration of the 
subsystem to at least one security monitor coupled to the subsystem via a 
network. 

33. (Original) The communications device of claim 32, wherein 

the security monitor is configured to set the communications device to an 

"untrustworthy" status in response to receiving the change to the configuration of 
the subsystem. 
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34. (Original) The communications device of claim 33, wherein 

the security monitor is configured to disconnect the communications device from the 
network in response to the communications device being set to the 
"untrustworthy" status. 

35. (Currently Amended) The communications device of claim ([3]] I, wherein 
the logging module is further configured to broadcast the change to a security monitor. 

36. (Original) The communications device of claim 35, wherein 

the logging module is configured to communicate the change when a condition is 
satisfied. 

37. (Original) The communications device of claim 36, wherein 

the logging module is configured to communicate the change when an amount of the 
change is above a certain threshold 

38. (Original) The communications device of claim 36, wherein 

the logging module is configured to communicate the change when a criticality of the 
change is above a certain threshold. 

39. (Original) The communications device of claim 36, wherein 

the logging module is configured to communicate the change periodically. 

40. (Original) The communications device of claim 36, wherein 
the subsystem is a communications interface. 

4 1 . (Currently Amended) A method comprising: 

detecting a change in a configuration of a subsystem of a conununications device 

wherein a logging module is coupled to said subsystem and said detecting is 
performed at the logging module : and 

communicating information regarding the change comprises causing said logging 
module to communicate the change information . 
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42. (Original) The method of claim 41, further comprising: 
determining the configuration. 

43. (Original) The method of claim 42, wherein 

the information comprises an indication of an occurrence of the change. 

44. (Original) The method of claim 42, wherein 

the information comprises a change made to the configuration. 

45. (Currently Amended) The method of claim 42, further comprising: 
executing a process in « said logging module of the communications device, wherein the 

logging process performs the detecting the change and the communicating 
information regarding the change. 

46. (Original) The method ofclaim 45, wherein 
the subsystem is a communications interface, and 

the executing the process in the logging module comprises executing a logging process. 

47. (Original) The method ofclaim 46, wherein the executing a logging process 
comprises: 

executing a logging process in the logging module of the communications device 
according to a configuration of the logging module. 

48. (Original) The method of claim 46, wherein the communicating comprises: 
broadcasting the information. 

49. (Original) The method of claim 48, wherein the broadcasting is performed using 
the communications interface. 

50. (Original) The method of claim 49, wherein the broadcasting is performed using: 
a logging module network address, and 

a logging module communications protocol. 
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5 1 . (Original) The method of claim 49, wherein the broadcasting comprises: 
broadcasting the information to a security monitoring process executing on a security 

monitor coupled to the communications interface via a network. 

52. (Original) The method of claim 51, wherein the security monitoring process 
comprises: 

setting the communications device to an ''untrustworthy'' status in response to receiving 
the change to the configuration of the communications interface. 

53. (Original) The method of claim 52, wherein the security monitoring process 
comprises: 

disconnecting the communications device from the network in response to the 
communications device being set to the "untrustworthy" status, 

54. (Original) The method of claim 48, wherein the broadcasting comprises: 
sending a series of data packets, wherein 

each of the data packets comprises an index number and 

each of the index numbers is taken from a sequence of numbers. 

55. (Original) The method of claim 48, wherein the communicating comprises: 
indicating the change to the configuration of the communications interface when a 

condition is satisfied. 

56. (Original) The method of claim 55, wherein the communicating comprises: 
indicating the change to the configuration of the communications interface when an 

amount of the change is above a certain threshold. 

57. (Original) The method of claim 55, wherein the communicating comprises: 
indicating the change to the configuration of the communications interface when a 

criticality of the change is above a certain threshold. 
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58. (Original) The method of claim 55, wherein the communicating is performed 
periodically. 

59. (Original) The method of claim 46, further comprising: 

executing at least one process in the subsystem according to the configuration of the 
subsystem. 

60. (Original) The method of claim 59, wherein the executing the at least one process 
in the communications interface comprises: 

executing a communications process. 

61. (Original) The method of claim 60, wherein the executing the logging process 
further comprises: 

restricting a change to a configuration of the logging module by the communications 
process. 

62. (Original) The method of claim 60, wherein the executing the logging process 
further comprises: 

broadcasting through the communications interface using a logging module network 
address and a logging module communications protocol. 

63. (Original) The method of claim 62, wherein the executing the logging process 
further comprises: 

restricting a change to a configuration of the logging module by the communications 
process. 

64. (Original) The method of claim 62, wherein the executing the logging process 
further comprises: 

restricting the communications process from broadcasting using the logging module 
network address and the logging module communications protocol. 
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65. (Original) The method of claim 64, wherein the restricting comprises: 
restricting the communications interface from broadcasting a change to the configuration 

of the communications interface using the logging module network address and 
the logging module commimications protocol. 

66. (Original) The method of claim 42, wherein the communicating comprises: 
broadcasting the information. 

67. (Original) The method of claim 66, wherein the broadcasting is performed using 
the subsystem. 

68. (Original) The method of claim 67, wherein the broadcasting is performed using: 
a logging module network address, and 

a logging module communications protocol. 

69. (Original) The method of claim 68, wherein the broadcasting comprises: 
broadcasting the change to the configuration of the subsystem to a security monitoring 

process executing on a security monitor coupled to the communications device 
via a network. 

70. (Original) The method of claim 69, wherein the security monitoring process 
comprises: 

setting the communications device to an "untrustworthy" status in response to receiving 
the change to the configuration of the subsystem. 

7 1 . (Original) The method of claim 69, wherein the security monitoring process 
comprises: 

disconnecting the commimications device from the network in response to the 
communications device being set to the "untrustworthy"" status. 

72. (Original) The method of claim 66, wherein the communicating comprises: 
indicating the change to the configuration of the subsystem when a condition is satisfied. 
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73. (Original) The method of claim 72 wherein the communicating is performed 
periodically. 

74. (Original) A communications device comprising: 
a subsystem; 

a processor, coupled to the subsystem; 

computer readable medium coupled to the processor; and 

computer code, encoded in the computer readable medium, configured to cause the 
processor to: 

detect a change in a configuration of the subsystem; and 
communicate information regarding the change. 

75. (Original) The communications device of claim 74, wherein the computer code is 
further configured to cause the processor to: 

determine the configuration. 

76. (Original) The communications device of claim 75, wherein the computer code 
configured to cause the processor to communicate the information regarding the change is 
further configured to cause the processor to: 

broadcast the information. 

77. (Original) The communications device of claim 76, wherein the computer code 
configured to cause the processor to communicate the information regarding the change is 
further configured to cause the processor to: 

indicate the change to the configuration of the subsystem when a condition is satisfied. 

78. (Original) The communications device of claim 76, wherein the computer code 
configured to cause the processor to communicate broadcast the information is configured to use: 

a logging module network address, and 
a logging module communications protocol. 
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79. (Original) The communications device of claim 78, wherein the computer code 
configured to cause the processor to communicate broadcast the information is further 
configured to cause the processor to: 

broadcast the change to the configuration of the subsystem to a security monitoring 

process executing on a security monitor coupled to the communications device 
via a network. 

80. (Original) The communications device of claim 75, wherein the computer code is 
further configured to cause the processor to: 

execute a process in a logging module of the communications device, wherein the 
logging process performs the detecting the change and the communicating 
information regarding the change. 

8 1 . (Original) The communications device of claim 80, wherein the computer code 
configured to cause the processor to execute the process in the logging module of the 
communications device is further configured to cause the processor to: 

execute a logging process, wherein 

the subsystem is a communications interface. 

82. (Original) The communications device of claim 8 1 wherein the computer code 
configured to cause the processor to communicate the information regarding the change is 
further configured to cause the processor to: 

broadcast the information. 

83. (Original) The communications device of claim 82, wherein the computer code 
configured to cause the processor to communicate the information regarding the change is 
further configured to cause the processor to: 

indicate the change to the configuration of the communications interface when a 
condition is satisfied. 
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84. (Original) The communications device of claim 81, wherein the computer code is 
further configured to cause the processor to: 

execute at least one process in the subsystem according to the configuration of the 
subsystem. 

85. (Original) The communications device of claim 84, wherein the computer code 
configured to cause the processor to execute the at least one process in the subsystem according 
to the configuration of the subsystem is fiirther configured to cause the processor to: 

execute a communications process. 

86. (Original) The communications device of claim 85, wherein the computer code 
configured to cause the processor to execute the logging process is further configured to cause 
the processor to: 

broadcast through the communications interface using a logging module network address 
and a logging module communications protocol. 

87. (Original) A computer program product comprising: 

a first set of instructions, executable on a computer system, configured to detect a change 
in a configuration of a subsystem of a conununications device; 

a second set of instructions, executable on the computer system, configured to 
communicate information regarding the change; and 

computer readable media, wherein the computer program product is encoded in the 
computer readable media. 

88. (Original) The computer program product of claim 87, further comprising: 

a third set of instructions, executable on the computer system, configured to determine 
the configuration; 

89. (Original) The computer program product of claim 88, wherein the second set of 
instructions comprises: 

a first subset of instructions, executable on the computer system, configured to broadcast 
the information. 
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90. (Original) The computer program product of claim 89, wherein the second set of 
instructions comprises: 

a second subset of instructions, executable on the computer system, configured to 

indicate the change to the configuration of the subsystem when a condition is 
satisfied. 

9 1 . (Original) The computer program product of claim 89, wherein the second set of 
instructions use: 

a logging module network address, and 
a logging module communications protocol 

92. (Original) The computer program product of claim 9 1 , wherein the second set of 
instructions comprises: 

a third subset of instructions, executable on the computer system, configured to broadcast 
the change to the configuration of the subsystem to a security monitoring process 
executing on a security monitor coupled to the communications device via a 
network. 

93. (Original) The computer program product of claim 9 1 , further comprising: 

a fourth set of instructions, executable on the computer system, configured to execute a 
process in a logging module of the communications device, wherein the logging 
process performs the detecting the change and the communicating information 
regarding the change. 

94. (Original) The computer program product of claim 93, wherein the fourth set of 
instructions comprises: 

a first subset of instructions, executable on the computer system, configured to execute a 
logging process, wherein 
the subsystem is a communications interface. 
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95. (Original) The computer program product of claim 94, wherein the second set of 
instructions comprises: 

a first subset of instructions, executable on the computer system, configured to broadcast 
the information. 

96. (Original) The computer program product of claim 95, wherein the second set of 
instructions comprises: 

a second subset of instructions, executable on the computer system, configured to 

indicate the change to the configuration of the subsystem when a condition is 
satisfied. 

97. (Original) The computer program product of claim 94, further comprising: 

a fifth set of instructions, executable on the computer system, configured to execute at 
least one process in the subsystem according to the configuration of the 
subsystem. 

98. (Original) The computer program product of claim 97, wherein the fifth set of 
instructions comprises: 

a first subset of instructions, executable on the computer system, configured to execute a 
communications process. 

99. (Original) The computer program product of claim 98, wherein the first subset of 
the fourth set of instructions comprises: 

a first sub-subset of instructions, executable on the computer system, configured to 

broadcast through the communications interface using a logging module network 
address and a logging module communications protocol. 

100. (Original) An apparatus comprising: 

means for detecting a change in a configuration of a subsystem of a communications 
device; and 

means for communicating information regarding the change. 
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101. (Original) The apparatus of claim 100, fiirther comprising: 
means for determining the configuration. 

102. (Original) The apparatus of claim 101, wherein the means for communicating 
comprises: 

means for broadcasting the information. 

103. (Original) The apparatus of claim 102, wherein the means for communicating 
comprises: 

means for indicating the change to the configuration of the subsystem when a condition is 
satisfied. 

104. (Original) The apparatus of claim 102, wherein the means for broadcasting is 
configured to use: 

a logging module network address, and 
a logging module commxmications protocol. 

105. (Original) The apparatus of claim 104, wherein the means for broadcasting 
comprises: 

means for broadcasting the change to the configuration of the subsystem to a security 
monitoring process executing on a security monitor coupled to the 
communications device via a network. 

1 06. (Original) The apparatus of claim 101, further comprising: 

means for executing a logging process in a logging module of the communications 

device, wherein the logging process performs the detecting the change and the 
communicating information regarding the change. 

107. (Original) The apparatus of claim 106, wherein 
the subsystem is a communications interface, and 

the means for executing the process in the logging module comprises 
means for executing a logging process. 



-17- 



Application No.: 10/664,55) 



PATENT 



108. (Original) The apparatus of claim 107, wherein the means for communicating 
comprises: 

means for broadcasting the information. 

109. (Original) The apparatus of claim 108, wherein the means for communicating 
comprises: 

means for indicating the change to the configuration of the communications interface 
when a condition is satisfied. 

110. (Original) The apparatus of claim 107, further comprising: 

means for executing at least one process in the subsystem according to the configuration 
of the subsystem. 

111. (Original) The apparatus of claim 110, wherein the means for executing the at 
least one process in the communications interface comprises: 

means for executing a communications process. 

112. (Original) The apparatus of claim 111, wherein the means for executing the 
logging process further comprises: 

means for broadcasting through the communications interface using a logging module 
network address and a logging module communications protocol. 
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